added user/post associations and authentication