added validations to user model; updated controller to restrict posts to current user; minor changes to views