* add emoji DELETE handler * no need to process error (thanks kim) * don't double check if user is admin * add missing security annotation