delete the user if access token is not valid