Actually disallow the login if player doesn't have the bypass permission