detecting duplicate logins