fixed update to only work for the owner