> The system only allows a single login per user, so if you have initiated the request first, somebody else would have to wait for you to finish the request unt

> The system only allows a single login per user, so if you have initiated the request first, somebody else would have to wait for you to finish the request until they can initiate it sounds like an easy DoS vector if the person knows your phone number as well