Fix: don't show private posts unless authenticated
Add Basic OAuth flow