CORE-4619 Made delete-workflow endpoints secured.

The username is no longer looked-up from the JSON request in the delete-workflow and permanently-delete-workflow endpoints.
These Donkey and metadactyl endpoints are now secured, so that the authenticated username can be looked-up from CAS.