prevent logging into a logged in account