Implemented Access control based on ownership

ToDo: Creation of objects has to populate user_id of sauce and cite