Added authorization and missing delete redirect