update to authToken, add /account/delete