Send user active flag

src/users.js

@@ -139,12 +139,12 @@ function validatePassword(password) {
 
 // remove all fields that should never be sent out via REST API
 function removePrivateFields(user) {
-    return _.pick(user, 'id', 'username', 'email', 'fallbackEmail', 'displayName', 'groupIds', 'admin');
+    return _.pick(user, 'id', 'username', 'email', 'fallbackEmail', 'displayName', 'groupIds', 'admin', 'active');
 }
 
 // remove all fields that Non-privileged users must not see
 function removeRestrictedFields(user) {
-    return _.pick(user, 'id', 'username', 'email', 'displayName');
+    return _.pick(user, 'id', 'username', 'email', 'displayName', 'active');
 }
 
 function create(username, password, email, displayName, options, auditSource, callback) {