new test to make sure a user can only delete their post