authorization and testing complete
view refactoring, add post#show