soft deleteing users
dont let deleted user to log in