Only allow authentication in private if the user is in at least 1
channel of the user.
This closes a security hole in which the user would never be
automatically be logged out.