Support user provisioning

It would be really helpful for us to support automatic user provisioning. Ideally via SCIM from our identity provider. But also exposing user create/deactivate methods on the API would be a good start.