only signed-in users may edit and delete