Require authenticated user for account removal
Make it clear why we have /login/http route