added some basic auth, added dependent destroy on links when user is deleted