User 'Disabled' feature and can change his password (requuire DB upgrade)

1. Each user can change his password
2. Delete user will be 'disable' only