[COOK-1239] users recipe will not remove users certs if they have action:remove

http://tickets.opscode.com/browse/COOK-1239

updated openvpn recipe to match users cookbook and remove users w/ action:remove