Do not sign the user in if they are not allowed

If the user does not have the signin perm then they do not have access
to the application.