changed edit/update to use form_for