let users delete their posts

`@post.user`, right?