don't fire loggedIn event unless actually logged in