find out guy who got the account deletion email was him hacking my API endpoints, fix admin only endpoint now (you could only delete your own account but still it did some admin stuff), and ask where it leaked info #nomads