Ability to disable users

Just to update - we just tested it - if you reset a password - it sends the user an email to reset password. Whe the recipient clicks on the link and resets their password, the old password will not work. So that should work in such a case.