If the user is not a member, restrict access so they cant login