use deduct_value() instead of delta_token_balance() for subtracting tokens

[qizhou]

deduct_value() will check if there is sufficient balance, and thus using deduct_value() with check() will automatically prevent integer underflow.