Create the current_user? method
Add A correct_user before filter to protect the edit/update pages
Add testing for the edit and update actions require the right user