Add routes, add auth to posts controller