User constrainted to have only one authenticated session in time