Added api delete to allow to go through without csrf.