I realize that this isn't your choice, but it seems to me that deleting a course should require authentication. I would also expect that it would log the delete action along with the user who performed it, so that at a later date blame can be assigned appropriately. :-)