gustafn
committed
on 26 Nov 18
Don't trust value of login_level just on basis of the session cookie