how to assert we are logged in when editing