Authentication should happen server side, but authentication need not happen at the time of delete. When deleting, you should be authorizing and validating, whi

Authentication should happen server side, but authentication need not happen at the time of delete. When deleting, you should be authorizing and validating, which can safely be done client side... but, if you are doing something server-side (e.g., a delete) you should also be doing it server side.