Allow sessionAuth on reconnect. (#31)

If no user or password is given in /connect; attempt
to use session auth before failing.

Also, rename autologin and session_url to sessionAuthURL and
sessionAuth.