Add option to reveal the fact that a user's account is inactive when they try to log in (default disabled).

If off (the default), inactive users just see the standard "email/pw is invalid" message.

If on, inactive users are told explicitly that their account is disabled.