Added specific middlewares to require authorization and to respond only to JSON requests (example)
The 'delete' operator was not working. Let's set to undefined instead.