Catch tgt login and force nemid for private users