add before_action hook to confirm that only a post's author can edit or delete the post