posts only editable by authenticated user