added auth for delete and edit