Do not store login in database

This patch uses an in memory storage of logged in users. Every time
users send a (online) heartbeat the last known active timestamp of all
users will be checked and inactive users will be removed from active
user list.