add simple user check to postdelete