users can now be deleted by the admin