posts look at 'user' for rendering, instead of old-style 'by'
send X-Token
fix a bug where navigating to login, then back to the homepage, then adding a post breaks the app
fix a bug where nested posts were being added at the top level
added auth stuff -- hiding the post box when you're not logged in, a log out button, etc
slightly more accurate signup message