prevent deleting non-existing record
API authentication via api key with warden