make edit and delete only visible to those logged in