adding simple auth for delete permissions