use devise hook to reject authentication for disabled users
Setup password resets for active users only