User can only delete their own appointments