flask: deluser(
) and some nicer looking, api: no known hacks couldnt broke it, ajax userlist