api: cleaning books controller + testings
api: cleaning users controller + testing
api: users controller don't broadcast private data + testing
api: users can delete themselves + testing