prevent login if already logged in