fix: only authenticated user can edit data