tested to ensure users can only edit own restaurant