added authorization for user editing itself.