add authorization for editing and deleting users, admins
Merge branch 'updating-users'