Feature/user migration

Oh dear. Are there few enough spam users that this catches all of them or are there false positives that we'll need to handle manually?