add DELETE #destroy method to UsersController, tests