added admin to user model, removed links and required authentication in post controller