Reauth endpoint

exam/api/Posts/Posts.php

@@ -60,7 +60,7 @@ class Posts extends Api
       $post = Post::getByID($id);
 
       // Throw 400 if we aren't admin but trying to edit another users post.
-      if (!$self->getIsAdmin() && $post->getUser()->getID() !== $self->getID()) throw ApiError::unauthorized("Not allowed");
+      if (!$self->getIsAdmin() && $post->getUser()->getID() !== $self->getID()) throw ApiError::notAllowed("Not allowed");
 
       // Try update.
       Response::json($post->update($content));