Serve static assets
Add same protections to deleting users as demoting