Add the ability to remove user active for authentication check

What does this MR do and why?

Add the ability to remove user active for authentication check

• We do not think we need to check if the user is valid for authentication when we call it from the success method in the identity verification controller as we are sure the user is verified if they reach this point.
  • At the same time, we can't reliably reproduce why this would be an issue...
  • see troubleshooting thread in #457938 (comment 1879221862)
  • we believe the answer maybe somewhere in identity_verified? so we are removing this from the flow.
• We are also trying to narrow down the issue being presented in #457938 (closed)

MR acceptance checklist

Please evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.

Related to #457938 (closed)