Blocked users get a "Sorry, this account is currently blocked" message now. Better than the password error, and, what we probably want is something like *account+*blocked to point to a card they get taken to (where site-owners can explain why they might have been blocked, who they can contact to find out more, etc.), along with *blocked+*subject and +*message for them to get a pro-active email when they are blocked?

And when a blocked account is reactivated — *unblocked+*subject and +*message?

Denied users get a password error if they try to sign in. Do we want *account+*denied? And *denied+*subject and *denied+*message?

Also, currently if someone is signed in and get blocked, they are unaffected until they sign out. Probably best to sign them out immediately.