Make it possible to disable crowbar users

In some cases, it might be desirable to add additional users to log in
crowbar, and therefore to also enable/disable them. A new optional
"disabled" attribute can be used for this.