Inactive account holder cannot log in with ORCID

User story

Someone with Janeway user management privileges (an editor, press manager) has created an account for me in a Janeway installation. They've put in my ORCID, somehow (though we'd like to avoid manual ORCID entry #2610), maybe through the admin interface. Theoretically this should let me log in with that account via ORCID. If I try, Janeway runs this:

https://github.com/openlibhums/janeway/blob/836a651b281714d40f20f99a94e466a4c0050ef6/src/core/views.py#L167-L172

But if my account is inactive, I will not be logged in, I will be silently redirected to the site homepage, with no user-facing message. This is due to the check django.contrib.auth.backends.ModelBackend.user_can_authenticate being run when login is called.

Proposed solution

Check for account.is_active in the above Janeway view, and mark the account as active, and then run login. This is what we do for the registration flow, so why not here as well?

Alternatively (not ideal since the whole idea is to log in via ORCID, not email+password), add a helpful message via django messages, and redirect to the password reset step.

Start in src/core/views.py at lines 167-172 and compare the ORCID login flow with the registration flow's handling of inactive accounts. Confirm how Django authentication treats account.is_active, then verify that an inactive ORCID-linked account is activated and logged in without the silent homepage redirect.