Merge branch 'session_scope_check' into 'master'

only allow logins if the app unique key matches for the session

fixes #56 by checking that the user who has an active session has one valid for this vtiger instance.

See merge request !54