moved user postings into my/postings controller for better security and readability