Fix CSRF protection prevents deletion of objects