set newly created users to inactive so they cannot login at this stage