fixed logged in user being able to log in as another user bug