add require_creator method to restrict editing of posts to only creator or admin