prevent user from editing another user's blog