added authentication & admin edit only