authentication done, posts not done yet