put back login missmatch restriction but this time allowing also user alias
using user aliases from user entry
aliases stored in user objexct
better addUserAlias apip