Made goals controller safer by checking the current user against the user of the goal being update/destroyed.