add user,session
add restriction on who can edit the cat and who can approve/deny cat rental request