allow only active users to log in
limit access to active users