use authority
users can't be deleted anymore