Users can now be deleted + strict checks on controller and tag