need to login on posts controller