switched :only to :except on posts_controller
added update and destroy to skip_before_action
associations done