Instead of just giving an error message on login if a session cookie