don't let users delete themselves