Fix bug: Anyone can delete any package

Fix the bug where anyone can delete any submitted package, not even login is required.