allow bypassing the DELETE method by passing 'method' in the GET request
delete now works