Handle delete access control in routes too.