ensuring authorization of users, if they are logged in or not to create destroy product