add toUser to the post schema

this will be used for private posts