update todo
hide sign-up links for signed-in?
add edit to post_image