Move 'adminRole' config on server for security. Closes #17.

- Authorize user on blog post allow/deny rules
Use template contex data on edit page, since collection may not be updated yet

- Closes #15.
- Also, don't seem to be using Session.get('postSlug') anywhere