implement user disable tests
include user disable link in mail
implement user disable, when no user matches hash return error message