529 deactivated users

Resolves #529 by replacing deactivation by banning and unbanning
why don't we require that a CSV import meet the `require_phone` option?