Implementing missing authorization logic.
Added an Author role and update permissions accordingly.
Updated permissions to include rules for posts.
Added specs for basic Post functionality.
Basic blog functionality.