FIX: deactivated users shouldn't be able to log in
oops, fix broken current_user_spec