[frontend] Allow admins to flag "local users"

When OBS is configured to authenticate via LDAP, we were disabling user
configuration via OBS.
This commits adds an attribute to the user model that allows admins to
flag users to be configured by OBS and not by LDAP.