Add sql_unset_user().  Fixes #640

It's really just a macro around pairdelete.  But it's clearer
to have sql_set_user() / sql_unset_user, than to use pairdelete