associated user with post; authorization before creating and deleting post