updated user authentication to only allow users to edit/delete their own posts