bugfix: allow deletion of user's identities via api when user is deleted. closes #6550