add DELETE on /users/:username