Fixed is_active and workflow bugs.

Vendors now have an is_active flag since Django was blocking us from
doing anything useful when django.contrib.auth.models.User.is_active
was set to false.