[FEATURE] Lock users for authentication

Extend User Entity:

__Tasks:__

- [x] add new fields to User
- [x] update user authentication
- [x] add possibility to enable user in backend
- [x] update tests

__Informations:__

| Q             | A
| ------------- | ---
| Bug fix?      | no
| New feature?  | yes
| Tests pass?   | yes
| Fixed tickets | none
| Doc           | none
Actually I would remove these few lines, and append this information to the `@throws`-annotations below, like in http://phpdoc.org/docs/latest/references/phpdoc/tags/throws.html