recheck auth in media_delete

Sometime the passed AUTH was not correct. This is a quick fix,
but the whole media manager handling is one stining pile of crap that
needs a major rewrite.