standardize deactivated support

it was intentional, There arises a corner case that hasn't been addressed if a deactivated account and an active account both share the same email or employee id. There isn't any guarantee which account will be returned by the method and there is no indication that there could be additional accounts.

With guids we guarantee they are unique at every step of the process, so they don't suffer from this issue.

The facebook id should probably fall into the same category as email and employee id, but currently when an account is deactivated the facebook id is removed from the account. I actually think I'm going to change the behavior of facebook id to follow the same pattern as email and employee id to make sure I account for it in my own code correctly.