Dashboard reports customer secure zone login even if not sucessful

Hey there.

Someone can login using a username and password if assigned that. So even if they are not assigned to a securezone but the username and password they provide is valid - They will login. The BC islogged in module will return they are logged in and the admin will show that as well.