ensuring only active users can get in