User can delete their package

maybe this should be renamed to "Users can delete *anyone's* package"