add may_destroy? method for users