typo was setting canHaveLoginForm true for everyone - oops. Fixed.