bad SSO request, user not logged in