[SECURITY] Prevent login of restricted users