authorization and editing of users, and index of all for signed in users