disallow user to delete himself