Users can sign up, but there's no way to delete a user. One can remove them from all roles, but they still clog up the user management page.

I think the correct solution isn't to remove the user from the system, but just to hide the user from the admin. Then we need some way to distinguish not-yet-activated users from ones we want to hide. Not sure how to proceed.