Added code in controller to force logout when you try to login. Should we do this?