Users can view and update posts

- Enable all users to view all posts
- Enable current_user to view their own posts
- Enable current_user to edit their own posts
I see `current_user` all over this controller, but you don't ensure the user is signed in with a `before_action`. Therefore your app will crash if a user tries to go to `/posts`.