prevent multiple logins on the client side