autherize user for post and comments working, cleaned up views and controllers