committing, still having issues with users not staying logged in
only show message form if user and current_user match