Added authorization for posting action
Made it default to play all available actions