don't allow login attempts while offline - fixes #41