Bug fix: non-actived users can login