restricted destroy to being logged in