changed form to have multipart data, also made posts controller require auth again