As a first step for user deletion we just deactivate the user.
In the backend the ProfileController class has a new method disable_user
which (if the correct password is given) deactivates the user

In the backend the session/profile factory has a disable_user action
with which the ProfileController can be reached.