respond with error when user signs in via SSO to an account pending approval

...oval