only allow logins if the app unique key matches for the session

fixes #56 by checking that the user who has an active session has one valid for this vtiger instance.

See merge request !54