enabled authorization for add/edit info s.t. user must be logged in