add settings check to prevent auto login