Do not allow an in-active device user to login