* Make sure we cannot deactivate the owner * Use different error code when trying to fetch token for inactive user