hotfix/Adam/disable accounts 2

@nedbat @cpennington 

This PR does:
1) creates a user standing table
2) creates a view and template that lets a global staff member change a user's standing
3) adds middleware that checks user standing and deletes their session if it's bad


It does not add tests, which will be added soon