docs
USER_ENABLE_LOGIN_WITHOUT_CONFIRM. User.is_enabled instead of User.active