[Standards] Re: HTTP file upload deletion

The upload service MUST verify that the requester is authorized to delete the file before deleting it. For example, a service can record the bare JID that requested each slot and permit deletion by that bare JID, irrespective of the resource used for the deletion request.

Would it make sense to reuse the Authorization and Cookie headers from the upload request to authenticate the deletion request?