Raise a validation error when trying to recover password for an account that is not active.

This MR fixes a bug where the middleware allows you to try to recover a password (sending password recovery link through email) for accounts that were disabled.

After this commit the middleware will show a message stating that the account is invalid instead of sending the email.