If the user changes their password by "forgot password" then the admin / super admin needs to activate that user.