Administrator lockout via non-atomic user deletion

Race condition in FreeScout before 1.8.181 allows remote authenticated users with administrator access to delete every administrator. The delete_user branch of UsersController::ajax counts administrators and then deletes the requested account without an atomic guard, so concurrent requests can each pass the last-administrator check. An administrator must submit concurrent deletion requests for different accounts; success can remove every administrator account and eliminate application administration until recovery.