edit users and authorization