Check lastLogin before using it

The lastLogin attribute for applicants is not necessrily set now that applicantscan be created by administrators.