added destroy user to api