prevent autologin with other site