setting a password length, edit/delete product only if signed in or by user who created product