Delete method will accept session key as query parameter instead of form-param