added user authorizations to edit/delete pins