test DELETE
add authentication