Implement user (de)activation from moderator panel

- more security with @login_required and is_superuser checks
- remove "admin" from table