made sure only current user can delete status