The content of api/users/update is
Update a user. If a deactivated user account exists with the given login, it will be reactivated. Requires Administer System permission
But actually it cannot reactivate a user. deactivated user must be recreated and deactivate is equal to delete.