added delete/edit links to user pages, added auth to UCD in controllers