changed button request to GET edit post page
Address security concerns in images controller