added authentication so only the right user can edit a user profile