Check that /data/users.json is present

Before requiring it, check for the file presence. If there is no file,
start with an empty users object.
Destroy session on user removal

When a user deletes her profile, automatically log her out.