Hi Janeyg,
I recommend using a 'flag' like a checkbox field in your user table and making sure that is changed to TRUE when the user logs in successfully, on the concurrent attempt you need to check for this being false else fail the login attempt with a message stating the user is already...