bugfix, request method in deleteAction should be POST, not DELETE