Fix security issue in delete-response action - allow only ajax request.
Unify code for identities and responses deletion.