fixed authorisation to delete lab results