protect last user by using after_destroy & transaction rollback