Only allow users to delete themselves from the content

Change DELETE /contents/<content-id>/users/<userid>.json to return 403
Forbidden if userid is not the logged in user.