timsieved:actions_setuser(): sieved_userid can be leaked

Upon UNAUTHENTICATE and another AUTHENTICATE the variable sieved_userid is set to
a new value and the old value is leaked.

In timsieved:actions_setuser() there is no need for local variable ‘user’, which does
the same as the static variable ‘sieved_userid’.