updated posts controller so only admin users can create/edit/delete posts