RSET should be allowed if not logged in