only allow the author to edit the post