Support deletion of user records

You can delete user records either from the user token (which can only delete its own account) or from the server token (which can delete any account). In both cases you must supply the user's password to successfully delete the record. The low-level API supports the idea of an admin key to force the delete even if you don't know the PW but we don't currently support that at the high-level API.