ensured cannot delete last user