A set of changes to the login mechanism. Use the cookie to determine
who the user is instead of passing ?uid to every page all the way down. Update login timeout with each useful operation (done in checklogin). Put default user name in the login box when visiting the page.