restricting unauthorized users from accessing the members edit page