Added controller verification that current_user is not author