Check if user is already logged in for DAV auth, instead of logging in and creating new sessions for every request

fopen() didn't work for large files on some servers while readfile()
seems to work for all files on all configurations.

Fixes a problem with the user creation ("User already existed" even if the user don't exists.) Thanks to Phil Reinhardt for pointing this out.