prevent login for existing but unregistrered user