checks rep at login. if < 0, make read-only