User can only access editdata.php from the create animation form, but not directly via the URL. This guarantees that the session variable will be set correctly.