added before_action to keep users from being able to edit other people's posts