js_initcx() now creates the user objects (e.g. msg_area, file_area, etc.),

so now non-user services (like the finger service) can still have access to
these objects without requiring a false login().