You can put some logic in the action that signs them in and add or return an error in an after_action hook