Added authorization for update and delete.