Added some basic security around the CRUD operations.  User ownership is now checked when modifying user data.