Started new authorization method
Added user edit authorization, only allow user to edit own userinfo
Finished up Authorization, added params authorization