Users are now validated before logging in.

Want to double check this before with echoes with Jeremy at some point
but they should be working fine.