Added auth check for :delete and relative tests, also fixed bug in the test of :create