Moved filters out of views.py
Added authorization to POST request
Added DELETE endpoint