Admins can disable non-admin users