Don't let the user log in until he needs to