only creator can edit / update / destroy auctions