Added more attribute authorizations and a before filter on destroy