Implement a server route/endpoint to delete a story.

There is currently a URL under the "/admin" path and gated with Basic Authentication that allows stories to be deleted, but this needs to be an endpoint that any authenticated & authorized user can use to delete a story they have the rights to manage (i.e. they are the author or the admin)