ensuring authorisation when requesting deletion, and when showing the delete button