Single sign-on w/ fake account detection