feat(disable user)

SD-793
seems like duplication in db and ldap auth implementations. maybe this should be part of some base auth class both would extend. or we can have some core superdesk auth  that will call specific auth implementation based on settings to get user and then do this sort of check