refactors form in postEdit and postNew templates into it's own template postForm
adds ownsDocument permission helper to allow update and remove posts only if the user is the owner of them
adds notification messages with notfy(message, kind) from JS and adds a partial to display them within the layout
replaces alert() with notify(message, kind)
adds a validation to deny update if the user tries to update any field other than title, url or message