more on attackImmediatelyAfterLoggingIn