oauth plug: fix deactivated check