userportal, webadmin: prevent session fixation

- This patch creates a new session when a user attempts to log
  in. This is to prevent session fixation attacks.

Change-Id: I3df427683c924f10cb59f4af1dd067fcfd21a8f2
Signed-off-by: Alexander Wels <awels@redhat.com>