Add access control for posts

- No change for admin users.
- Normal users can only manage their own posts.
- Add admin post view page `admin.post.view.html` with entry in `admin.post.list.html`