Clean up dependent objects on deletion

This will prevent brokenness when we allow admins to CRUD users in the
future.