Delete the users activities when deleting their account
Only authenticate requests after handling 404 cases

Fix a bug where using Basic authentication for a user that doesn't exist
returns a 500 error while it should just return a 401