disallow edit if not logged in