add authentication so only signed in users can edit their information