Don't allow password login until email verification is implemented.