for some reason I get back http 400 (Bad Request) if I login on another browser while refrshing the first. I just want to accomplish that one user can only have one active sessi