Do not allow local user login that match the device primary user login.
Put check_access() to its own function.
Instead of complaining loudly about local user login being the
same as primary user login, warn more gently and disable the
(local) login.