eliminate before_action. instead filter posts through user