redirect inactive user to 404