we must use DELETE method to destroy user