Allow user status modification

Related to issue #124 
maybe call this STATUS_LOCKED?