change production db username
remove ruby's wrong syntax
add dotenv in production
add post's validate