Rule add/edit/move/delete works (#39)

- Begin moving auth to route definition where practical
- Fix typo on post list page

src/admin-theme/post-list.liquid

@@ -54,7 +54,7 @@
                 <span class="text-muted"> &bull; </span>
                 {%- assign post_del_link = "admin/post/" | append: post.id | append: "/delete" | relative_link -%}
                 <a href="{{ post_del_link }}" hx-post="{{ post_del_link }}" class="text-danger"
-                   hx-confirm="Are you sure you want to delete the page &ldquo;{{ post.title | strip_html | escape }}&rdquo;? This action cannot be undone.">
+                   hx-confirm="Are you sure you want to delete the post &ldquo;{{ post.title | strip_html | escape }}&rdquo;? This action cannot be undone.">
                   Delete
                 </a>
               {% endif %}