Updated privacy and authentication in posts_controller