added login for /editor and 'current user' for post.author