only authorized users can update profile settings
finish user edit, delete, update and index actions