Customized sessions#new. User cannot access if de-activated.