Security fix: If a session is found user can't access login action