adds basic edit view and destroy action for posts, access still unrestricted
restricts post manipulation to signed in admins in both views and controllers