user's can't set/unset site in Login Details without the proper authorization