> But what I want to do is pass an entity into the call so that the server can see if it actually matches the resource or not (and only delete it if it's the right one):
The resource should be uniquely identified by the URL you're asking to
DELETE. If you need to make sure you're deleting the right "version"
of the resource, you should pass that information in the URL as well,
probably as a query parameter.