Aha, my mistake, i forgot to mention that you need to add a setting in /opt/iredapd/settings.py and restart iredapd service:
CHECK_SPF_IF_LOGIN_MISMATCH = True
If it still doesn't work, please turn on debug mode in iRedAPD and trigger this issue again. i need detailed debug log for troubleshooting.
I will enable this option by default in next release.