Only test for LOGINDISABLED when the auth method actually is 'login'.