@robguthrie 
given the deactivate method is only accessible via this route:
```
deactivate_admin_user PUT    /admin/users/:id/deactivate(.:format)      admin/users#deactivate
```

am I correct in thinking that we don't need to check the person accessing that path is a Loomio Admin because Active Admin will handle that yes?