Only lock staff accounts to session fingerprints
Better info about user types