Fix security hole
Allow users to delete items