require authentication for posts all actions