New users are not active

Using the "is_active" boolean field to indicate whether or users have been minimally authorized.
This fits in more cleanly with the standard Django auth scheme.