allow account deletion via api
fix wording (email -> user)
change 'Pass' to 'Password' in error messages