add code for preventing status update for users that are not the current user