Add logic for is_inactive based on last login time

Closes #7 (closed)

Description

This MR adds the logic to is_inactive which is used to determine whether external users can be considered inactive so that we can block them. We are looking at the last login time and if they never logged in, at the creation time of the user.