Add session control and secure login

This patch adds a block for https:// user login and gives the ability to lock user sessions to an IP or/and user agent. I haven't actually tried to spoof anything to make sure it actually works, but the theory is all there for DRUPAL-4-7.