Prevent users from editing others phone numbers

This was previously only protected by the UI, now we prevent it in the
view methods.