add Destroy API and changes in authentication API