Standardized copyUserToSession; ignores passwords

In db_login, copying everyting from $user_info into $_SESSION was being
done twice. It's now done by calling copyUserToSession($user_info),
which also doesn't copy password stuff.