Looks like CORS disapproves of the HTTP DELETE method, so we must offer item deletion as an action too