in order to be a good test we should have both positive and negative test data. In this case, we want to make sure that if we have a recent valid signup it's not deleted as part of this work. We should also include a user that is not in signup mode, but is activated, and possible at least one user that's a logged in user that's forgotten their password. This makes us certain that the code works as intended and will not accidentally remove legit users from the system. 

Sorry for the extra test work, but this is a particularly sensitive bit of code that can cause a nightmare to fix if it goes wrong.