Added in security against XSS attacks by implementing htmlspecialchars() in Post and Users controllers. Also, made it impossible for users to unfollow themselves, so that they will always see their own posts in the post stream, and will not see an Unfollow button next to their own name under /posts/users.