removed ability for all but client role to cancel accounts