Only allow receipt owner to edit receipt

fixes #4