Add an API method to delete a recipe by ID; make sure recipe updates can only happen from the recipe owner.