added handle + auth for delete