access control for destroy
One edit page instead of two