allow editing of posts belonging to current user
allow users to moderate comments / also addressed some csrf vulnerabilities
fixed typo
Merge pull request #3 from jpabico/security

Security