protect DELETE request

Change-Id: I3fcf0ec2cf7f456e1e7beb69d37ce1759c370051