In admin -> users, I can see no way of removing a user.

Obviously you can change the password for a user to deny them access.