Active user account now checked on every page load (that also requires authentication).
Also added expired account exception to bootstrap.
Config files now require validate(); function.