fix SBP.logon assert to verify user has not logged in before

This also makes all current test pass