Remove `getUpdatedChars`.
Disallow DELETE on `/api/char/xxx`.