restrict views to check for logged in users/authors of posts