add validation that post is authored by expecting user