add authorization to edit user page and fix header error when logged in