only the current user can delete, view, or edit their account