update articles controller to only allow authors to view and update their own articles