Banned users now fail checkAuth