logged in user can delete other users, cannot delete self