secondChanceLogin active by default