2.5 Auto validation: users

• All users requires a valid login to access the service (needs definition. Is this a valid email?)
• A user may be removed or archived after a period of inactivity? (Would this apply to all kinds of user - could be risky for org admin)
• All users must remain in a system archive, even when deleted