disabled users cannot login. closing #13