modify create-post in post_controller to only allow current user to edit post.