Do not create session for login url

[rymsha]

Session is created every time login url is rendered, even when it is not needed. This is absolutely unnecessary and makes public pages private