Might want to verify `edit_user != request.user` (ie you're not removing staff on yourself), if you aren't already doing that.