user authentication and posts add API