added security to the remove user function