#2303503 : fixed potential security issue that a user could login even if they shouldn't be allowed to
Login Disable - Access Bypass - Moderately Critical - SA-CONTRIB-2015-162
Changes since 6.x-2.0: