Delete account: add auth check.