Why do we need to disable csrf?
Deletions are for real now
Rudimentary annotation view, waiting for javascript to flesh it out