user auth works for post edits!