users can only post as themselves, removed user_id from _form
updated readme