USERS security fix + TESTS deleteSales