fixed delete methods + removed passwordHash from serialized user