finished user edit, delete, admin authentication