Authorization for API.

Only admins can Delete/Update
fix cukes
Merge pull request #23 from wetap/feature/api_authz

Authorization for API.