fixing enable/disable users, as well as ensure a disable user is unable to do anything