edit user page, and settings link
authorization so only user can edit settings
sessions helper