add DELETE /users/{username}