move delete logic to annotation model
require use logged in for annotations
set annotator to read-only when logged out
add basic authentication ( laravel session ) and permissions