When a user logs on, mark him as logged on in a textfile or whatever.
If another logon request comes in, check the textfile to see if that user has already logged on. If so, deny the request.
Problem: if someone does not logout because his browser crashes bigtime,
he cannot login.
Solution: if a new login request comes in, logout the first connection automatically.
