END OF STEP 7, users can only delete their own posts now, user scopes set up