use form rather than prompt to get user password when deleting story