Add access_denied helper for app-wide general error message
Add before_action to require current user or admin to edit or update a post
Identify comment's owner post by slug instead of id