feat: multi-login(disable) fixed

httptest/user.http

@@ -0,0 +1,29 @@
+### login
+POST http://127.0.0.1:8080/api/user/auth/login
+Content-Type: application/json
+
+{
+  "username": "admin",
+  "password": "123456"
+}
+
+### verify login state
+GET http://127.0.0.1:8080/api/user/auth/login
+
+### change self password
+POST http://127.0.0.1:8080/api/user/update
+Content-Type: application/json
+
+{
+  "old_password": "123456",
+  "new_password": "654321@AaBbCc"
+}
+
+### relogin with new password
+POST http://127.0.0.1:8080/api/user/auth/login
+Content-Type: application/json
+
+{
+"username": "admin",
+"password": "654321@AaBbCc"
+}