pub(super) async fn account_deactivate_confirm_html(
user_id: &UserId,
login_token: &str,
) -> Result<String>Expand description
Shows a POST confirmation form for account deactivation. The login_token
is peeked (not consumed) by the GET handler and embedded here; submitting
the form consumes it, re-authenticating this destructive action.