Make sure auth module listens for current-user deletion

@aweiksnar That issue you had with the failing tests might not have been entirely cookie-related. I wasn't going through the sign-out business when the current account was deleted, so the auth module was left in a weird state of having a currentUser that didn't exist and a revoked bearer token. This fixes that.