delete: /blog/#entryId/delete handler
update/delete operations are now protected by `isAuthorized` function