replaced the abstract account management controller with a separate service class
return status 404 if the user to deactivate/delete could not be found