Esc users can edit and delete listing

![image](https://cloud.githubusercontent.com/assets/8655639/4984237/edbd6d3a-6921-11e4-9d88-0357bd5b6afa.png)

Because you use current_user.listings.find(params[:id]), consider making it a separate private method