Chapter 9: Edit authorization (allowing only signed in current user)