bug fix: prevent edit operation when user not logged in