Tracking of HTTP sessions and user login/logout.

The {@link com.top_logic.base.accesscontrol.LoginPageServlet} is called from the login page. Logout is done by invalidating the {@link javax.servlet.http.HttpSession}.