[Change Request] make sure inactive accounts can't auth to trac