fix findByEmail searching for deactivated users

yeah, this new test would have failed. I wrote the test then updated the code :)