if user logged in; disable login route