added fields to the form, added checked params to controllers, added some user authentication