db: getUser() doesn't take user state into account

[iPieter]

see:
https://github.com/iPieter/chat/blob/78cda2379677e6ba5635d2b0cb08b7e4a48ad810/app/database.py#L43

compared to sqlite code on master:

select display_name, password 
from users 
where username = :username
and (state = 'USER' or state = 'ADMIN' )
limit 1

[iPieter]

Fixed during reworking of settings page