FIX: User.is_disabled isn't checked at login
CHO: disable user veronica