Update to ensure only auth'd users can insert