removing canEdit user role protection from customer controller methods - simply using Authorized logged-in users