implement ban-list for system
add creat_at property to each model
auth user through oauth api for each post, put delete actions