fixed relationship in comment.rb
added relationship between users/posts
non-admin users configured to be able to create comments, and update/destroy their own
added authorization for post/comment controllers
using user_id field in comments tables instead of old 'user'
Only admins can edit the posts
Only those that can manage posts can see the edit/destroy links on show page