Add authorization to edit and update user actions