remove "user" OOB user account

Just removes the "user" account.  Although this is documented well, OOB credentials are bad, and we can limit our exposure by creating only one account.