adapted for heroku
add auth for product editing