Do not allow invalid user sessions on login check