Fixed #17903 -- Inactive users shouldn't have any permissions.

See [#17903](https://code.djangoproject.com/ticket/17903).
I don't think it's terribly important as both checks use the same code path (although this could obviously be refactored later at which point that argument would fail...).