Do you mean he can't login from two browsers simultaneously, or he can only ever log in a single time? If the former, you could keep a List of currently logged-in users in a static variable of your service. If the latter, some sort of DB storage might be called for.
Don't get me started about those stupid light bulbs.