respond with error when user signs in via SSO to an account pending approval

...oval
If this message is for the end user, it should use i18n.