Please make CBaseUserIdentity->_state protected

Would be nice to change visibility of _state class variable in CBaseUserIdentity class to protected or add protected setter for it. It can be useful to restore some states when user try to login without "remeber me" option.

Any feedback here? Any thoughts from framework maintainers? :)