added user auth and post CRUD