[Fix #129] CSRF protection prevents deletion of objects