#1 split login function into validate and login

[Kurt Sussman]

After a user is logged in, I want to check the password
again when they change their profile or other risky
tasks. using the login function adds to the login count
and affects the '$content' variable.