Summary

When user had an account but never logged to a Portal and then was deactivated and now trying to Sing Up via Portal, JSD send a validation email with the newly generated token inside which is invalid.

Steps to Reproduce

1. Create a customer account
2. Deactivate it
3. As a user go to a Portal and try to sing up

Expected Results

Generic confirmation message is shown to the user. No email is sent

Actual Results

Validation emails is sent to a user. When he click on it he got a message "Link is bad"

Nice to have

Somehow inform admin/agent about such user's attempt. May be in audit logs