Place 'auth' before filter on media delete statement

* Just a security precaution.
Refactor Keyword search lookup to Media Model,force downcase keywords