only logged in users can edit themselves and see their email