add migration to revoke admin access for inactive users