add auth helpers for ensuring that only owners can edit their own posts