fixing up routes to control auth before certain actions
new thread form in controller
pagination already handled by paginate()
remove whitespace