Ability to suspend user accounts manually or automatically#17

Some user account you don’t want to delete, so it’s sometimes more appropriate to disable them. We also want the ability to allow admins to mark an account as disabled so they can’t authenticate with the site.

Ideally, we should be able to have idle user account, or accounts with expired passwords, suspended automatically. These could then be unsuspended when a user returns and resets their passwords.