make the delete action work
add available download list action
handle secret restriction