Do not allow users that are disabled to be logged in via cookie. Allow all auth methods to disable users