show the top logged in avatar only if someone is logged in
remove duplicated action from index.js and posts.js controllers, add to parent application.js route. also work on trying to redirect unathenticated users to /posts