now users can be deleted by admins