added authorization for user edit pages