authenticate only on edit