Fixed some security holes in how user ids are received by controllers.
Working on making a safer post deletion system. Maybe moving the delete function to the model.