DB init, using ObjectId, Post data structure
unauthorized.html and logic