DELETE /user should implement the protocol we defined to remove a user's account from the membership portal by replacing all personally identifiable data in the User table with randomized or generic values and changing their access type.

We should preserve all data required for consistent history and metrics across the portal such as the user's Event Attendance and Store Merch Purchases