As a user I can disable a user's account to prevent login