Added req for user creds on every push action
Added authorization for editing lists