ensure user not already signed in