allow users to delete themselves (with confirmation)