add confirmation when deleting users, extend admin access and update routes