always emit the preSetPassword hook, this should only indicate the intention. Finally the post-hooks indicate if it was successful or not

Cache: mount user mountpoints to make sure that // exists before accessing it. Fixes #2553 and #2374

adding PHPDoc comment for $user within the hooks callbacks
fixing PHPDoc comment on isLoggedIn()

user should set into session before postLogin hook otherwise it will break not only the files_encryption app