only let visitors remove their own files.