a delete is an update, but that should not be seen in user api, I will change to another failure message