fixed passing correct id for delete from view to controller also exposed app to nonlocal devices