only allow logins if the app unique key matches for the session

fixes #56 (closed) by checking that the user who has an active session has one valid for this vtiger instance.