Fix #3 Ensure user is logged in when allowing delete view. Generally improve view permissions in the process.