making sure only logged in, good users can delete, edit, and update