Restrict login for blocked user.
Add "warning" flashdata.
Login must be with username.