Secured the edit page

[cohen990]

• Added antiforgerytoken
• added checks to ensure that the current user is the user that wrote the post