Restrict destroy action to authorized persons