User enable/disable via AJAX