Let users update their posts

This is dangerous - what if you're not in the Posts controller? I'd move both of these methods to the Posts controller because it's unlikely that you'll need them in every controller. And if you do, you can move them later.