When deleting a message, the message-id specified in the entity-body must
equal that in the request-uri.

This prevents replay attacks!