Check password_changed_at to determine if an account is activated