Implement user "disabled" flag as an alternative to deleting the account