added auth on edit, new