Authorization (you can only edit sth you created)
ALTER TABLE posts ADD COLUMN user_id INT(11) AFTER BODY;
using 'authorize Controller' and isAuthorized to do next two things after user login
role admin can access any actions
role author can access posts add and their own posts edit and posts delete