Deactivate users

This is just the backend portion to deactivate, the frontend and controller action I'll send in a later PR