authorization check for user edit buttons
Merge pull request #458 from concerto/secure_user_buttons

authorization check for user edit buttons