removed authentification for delete requests