update authorize to cover the edit page