Approving an activated staged user tells them to log in, but doesn't allow them to log in

[tobiaseigen]

OK, I was able to replicate this on my site. It is indeed possible to activate a staged user, which is not correct. Good catch!