USERGRID-2281:

 o added logic to consider unconfirmed state of user before allowing login
 o added exception for unconfirmed users
 o partially related to USERGRID-2164
 o TODO: test case needed for fix
 o TODO: another issue is the faulty confirmation redirect - USERGRID-2287