allow delete with POST for now (can be changed with angular controller for lists later)