Allow only the controller of a card to delete it.
#529