[FEATURE] Lock users for authentication

Extend User Entity:

__Tasks:__

- [x] add new fields to User
- [x] update user authentication
- [x] add possibility to enable user in backend
- [x] update tests

__Informations:__

| Q             | A
| ------------- | ---
| Bug fix?      | no
| New feature?  | yes
| Tests pass?   | yes
| Fixed tickets | none
| Doc           | none
Is it possible that you never use this deferred? Have you only forgot it, or could it be removed?