Make user deactivation a method on the User model, provide callback.

Now applications can easily implement their own behaviour for when user accounts are deactivated.