change check_person to whitelisting conventions
allow non logged in user to see posts show