Fixing missing delete functionality and XSS mis-step