Add authorization check for new post and destroy

Test http://localhost:3000/posts/new --> Access denied