added authorization for users; added deletion of users