refactored routes; expanded user functionality; authors can only update their own posts