controller spec for updating when right/wrong user
testing: controller can only update/delete if right user
test delete & update in controller
only show new & delete buttons if post made by current_user, associated user with post