user can create and view posts
trying to only allow the user that created a post to delete it