fix so user cannot register/login if already logged in