You shall not pass (with a nonactivated user that is)