admin can disable users from login and flash message appears