added ability to delete users, including protection against self-deletion