only let cat owner edit/update cats
only show buttons if user owns cat
CatsController: force current_cat evaluation through filter
only let owner approve/deny rental requests