Added js to handle not authorized condition
It's not the best because it uses AJAX,
so part of the page will load before the user receives
the 'not authorized' message, but it works.
They still can't edit it anyway