Add test to ensure anonymous users can access individual public posts
Standardizing protected/private variable naming
Refactor GET and PUT /posts/:id to share post loading code

* We use this to simplify run the access checks against that post too.
* Load post using resource() with actual work done in _resource()
* Override _resource for special loading behaviour