Make the deactivate request a "fake" AJAX request, which makes it work for logged out users too.