forgot to comment out def authorize in posts_controller