removed DELETE from api allowed methods -- just don't really see the need for exposing that level of chaos