fix suspension check bug

if a user was suspensed using the ->suspend() method, he could still
bypass the suspension on login