[api] allow to accept reviews for delete requests

wrote a test case to highlight issue #550 and fix it with yet another
attack of the spaghetti code monster