Refactoring user delete to use POST in ajax confirm request so it can't be accessed directly via GET