add deleting, promoting/demoting, guesting (soft banning) users

views/user/delete_confirm.etlua

@@ -0,0 +1,12 @@
+<h1>Are you sure you want to delete your account, <%= user.username %>?</h1>
+<p>This cannot be undone. This will not delete your posts, only anonymize them.</p>
+<p>If you are sure, please type your password below.</p>
+
+<% if err then %>
+  <h2><%= err %></h2>
+<% end %>
+
+<form method="post" action="<%= url_for("user_delete", {username = user.username}) %>">
+  <input type="password" name="password" id="password" autocomplete="current-password" placeholder="Password" required><br>
+  <input type="submit" value="Delete my account (NO UNDO)">
+</form>