add post#destroy authenlicate
add auth to posts#update