More lax validation when force login