added authentication req for destroying posts