admin can delete users. closes #13