Some security fix?

Thanks for the good plugin. I'm currently learning myself cakePHP from PHP through implementing plugin.

I've seen that in the code, a visitor may delete a notification through random insert the notification ID ( success rate may increase when the user database grow). Here's some quick fix, still some modification can be applied into it to allow admin deletion.