added status codes and auth for del