fixed bug where you could view edit page without being correct owner