Update users.js to allow User to block or unblock challenge requests

Added allowChallenges property to User, function to switch it on/off