Add authentication to all post routes except show.