add some sane checks prior to deleting and add users to dashboard
add permission check