Add can_withdraw(user) method to AuthenticatedUser

For ticket #2162

Change-Id: I3f5247488b8fee52010db182f5d92f5c6c650a52
Ensure a teacher can't remove themselves via another instance.

Change-Id: Id564bd5bab2a2bd36a79934f3f9de1d711b65f01