Add authorization to edit/update users

Through tutorial 9.2.1
Add bad user handling

Next is 9.2.3
Add friendly redirect

Next up 9.3