write about delete permission API and authenticate API