allow do not lock user himself out