This moves the deactivated user check to the method which all login types call. Additionally updates the application service tests to be more realistic by removing invalid tests and fixing server names.
To improve the organization of this code it moves the JWT login checks to a separate handler and then fixes the bug (and a deprecation warning).