change authorization behavior
insert validation for editing user
minor modifications