delete fully implemented with CSRF cookie for ng after_filter added to application controller