admin can delete users, cats, and reviews

Maybe move this logic into the Review model.