Associate users and articles; require login to post

Resolves #12.
is there convention for this? Or just a big `if logged_in?` around the entire method?