delete user
password -> hash