Don't allow an inactive/pending user to login.