added role to user and required authorized user to edit, new post
added pundit and authorization