change message for delete
fixed permissions for visits and default users