Allow deleting users. Fixes #117

The audit framework assumed that auditable objects have an 'instance'
param, which is not always the case.