removed isActive() check on sso session - it is crowd's responsibility to decide which user is allowed login
sso e2e tests done