added delete action to user controller complete with confirmation box