editing and updating reservation now requres authorization