Users can view and update posts

- Enable all users to view all posts
- Enable current_user to view their own posts
- Enable current_user to edit their own posts
You're referring to `current_user` in `edit` and `update` actions - why aren't you requiring users to sign in first?