Add authentication to delete function