Stop deleted users from resetting their passwords

And it's tested properly this time :wink: