Authorization stage 1 complete (users can only edit themselves)