added authorization for being allowed to edit a story