added is_active check to login/authorized