add authenticity token to forms
add checks for ownership of cat for approve/deny and edit/update