adding security to prevent users accessing other users data