remove user DELETE /api/:token