improvements based on comments

 * changed ‘lambda’ into ‘user’
 * default to redirect to ‘/book’
 * removed session tampering
 * added note in login page

Signed-off-by: Bernard `Guyzmo` Pratz <guyzmo+github@m0g.net>