hotfix/Adam/disable accounts 2

@nedbat @cpennington  

This PR does:
1) creates a user standing table
2) creates a view and template that lets a global staff member change a user's standing
3) adds middleware that checks user standing and deletes their session if it's bad

@wedaly the failures with the video caption tests are known issues, right?