Use the WordPress authenticate filter to check if the user attempting to login is still pending activation so a custom message can be displayed