Added password authentication for update/destroy actions