added user edit and added right user authorization