Preventing users from logging in unless RBAC is enabled