js_initcx() now creates the user objects (e.g. msg_area, file_area, etc.),

so now non-user services (like the finger service) can still have access to
these objects without requiring a false login().

src/sbbs3/services.c

@@ -597,6 +597,10 @@ js_initcx(JSRuntime* js_runtime, SOCKET sock, service_client_t* service_client,
 		if(js_CreateFileClass(js_cx, js_glob)==NULL)
 			break;
 
+		/* user-specific objects */
+		if(!js_CreateUserObjects(js_cx, js_glob, &scfg, NULL, NULL, NULL)) 
+			break;
+
 		if(js_CreateSystemObject(js_cx, js_glob, &scfg, uptime, startup->host_name)==NULL) 
 			break;