oscar: fix checkdisallowed condition, which was breaking login.
Accidentally broke it in d57484d (from last week)