only users that own the account can edit or delete their account