moved the forced log out of a user by his mail address (if he is logged
in already) after the error checking, so that you can't log out a user
by using his mail address but without the correct password