re-implement :check_creator before_filter to make sure only creators can edit/update/destroy