adding authorization to create/edit/delete a new product or review, products and reviews can be viewed without logging in