allow admins to delete users [closes #224]