add parameter for vas.conf: disabled-user-pwhash & locked-out-pwhash

This line was moved to get alligned with the updates that are pushed to vas.conf by the QAS team periodically.