Add the ability to disable an account

[Christian-Toney]

### Completion criteria for developers
- [ ] Return a 400 if the user doesn't provide a token
- [ ] Return a 401 if the provided token is invalid
- [ ] Return a 400 if the account is already disabled
- [ ] Return a 200