DELETE /api/users