class "Users" moved below old create_user function
Bugfix: <username> was not taken from url
'test_delete_user' test case added
deleting other users is now forbidden
if <username> is not in userdata and I'm logged, it's not a 404,
it's an error of coding. So I removed this if.