added authentiation to delete action