add authentication to deleting client