allow only activated users to login with additional error message handling for pending/denied accounts