loginticket 5.x-1.3

Follow-up release: fix the (newly introduced) feature that keeps the user logged in if she's the target (passcode-matching) user. The fix is twofold: a) it calls hook_loginticket($op='login') also for this case, and b) it returns the user object instead of TRUE, which is what the apidox say.