_you don't want a user or admin to delete themselves and still have the token around, need to blacklist their current token or log them out_