proper deletion of users and all their associated data

user deletion still needs a few improvements:

  • if you delete your own user, you should get a page that says you were successful (currently you get an error message saying you are not authorized).
  • admins should be able to delete users
  • the other records for the user need to be deleted too (identities, soledad, tickets, customers, etc).
  • when an account is deleted, we should strip their user record of all information, but keep the user record (in a 'disabled' state). the other records should be purged, but we want to prevent someone from re-registering the same username right away. it should then be provider policy if they ever want to purge these dummy placeholder user records and allow the username to be recycled.

(from redmine: created on 2013-10-22)