adding authorization to the edit submission action