duplicate login detection