Run the authorization check onLogin

Doing it when a user was added to the collection was causing some
strange exceptions.
Bump version