Let users update their posts

You can't validate this because models don't know about `current_user`