user page editable only if owner, keeper qr codes generated on the fly