Added auth verification to DELETE /institution