Improved security of new and create method of locations controllers, added limitation for editing locations