create basic boilerplate for soft delete user including make middleware that only admin and owner can access