handle delete case for authorized user