Fix a long-standing bug where deactivated users were able to login in uncommon situations.