mongo namespace protection extended to delete method also on Object and User