edit bill: add logging, and return HttpResponseForbidden if user is attempting to edit without permissions