added basic permission to check the post's owner --commit 8-2

fixed commit 8-1 router bug