Url now authenticates user, so only users can update their info