[#50974607] Don't allow pending/inactive users to login via API.