Partial session functionality

A new session is created when a password is entered.
If no password is entered, as long as the supplied session (from client)
matches the user's session in the db then they will be logged in.