toggling active on users, enforcing active on login