login: fix /etc/nologin handling (should prohibit non-root LOGINS,