Security fix: Prevent login by deleted and barred users