Suspended Directus user can continue to use session token to access API
Since the user status is not checked when verifying a session token a suspended user can use the token generated in session auth mode to access the API despite their status.
Since the user status is not checked when verifying a session token a suspended user can use the token generated in session auth mode to access the API despite their status.