authentication and edit