removed useless class
remove unnecessary checks
get rid of user_can_edit check
add can_edit method to user class

checks item of type Posting or UserApplication
changed a flash message
changed condition of what user can
Formatting
added few words
use flask_login for api auth, check token based
added todo
added flash message category