fix: Add EstablishHordeSession middleware to /auth/login route
fix(base#137): render Last Login date and time separately
refactor: Hold a SessionAccess locator rather than a specific HordeSession object
fix: Follow up on jcdelepine's PR #136 for parity between login.php and LoginService
fix(auth): generalize loginparams collection, honor selection via session