authenticate for manipulating posts