LoginAction now denies people trying to log in as a User if that User is
already logged in under a different client.