added authentication to post & comments c ontrollers, fixed