Update users.js

Added allowChallenges property to User, function to switch it on/off