Added authorization--must be signed in and can only edit/delete your own user object