spec to allow new users to be created with same email as deleted users

scramble user email/login and password on soft delete
Fixes #223