validate that image belongs to user before edit and delete