restaurants can only be deleted by their owners - added user id to restaurant model