Api user delete

Added the possibility to delete a user in the action API.

Call with a POST to `/api/action/user_delete` with a dict `{"id":"username"}`

Authorization is checked against the `user_update` right.