Don't allow inactive accounts to authenticate using basic auth