SECURITY: Make $wgBlockDisablesLogin also restrict logged in permissions