[eluser]shower[/eluser]
to avoid such conditions you can do
1.add the users to the dictinary in session start( of course you need to check whether the user already exists or not)
2.if the users exist do allow to proceed
3.Remove the users from the section once the user logouts out
4. create a dictionary in application start event