userPasswordStatus should be checked and managed whether the login comes directly or via API or SMS. If it's locked someone may have been hacking about..
Log in to post a comment.