added disabled attribute to users, ability to disable and reenable, yet to prevent login of disabled accounts