1. Amend cookie so that users can log in from any machine
(currently cookie restricts log in from one machine only).
2. If user is already logged in, and user tries to log in from another machine using same user name, display message “Already logged in” and do not allow log in.
…
3. When session ends, automatically log out user (eg when browser closes or they leave the website).
