User can delete their package

I don't have users! So yes, pretty much if you're on the edit page (only accessed through the confirmation email after creating) you can change and delete the package.

Too open?