Updated base for API to include sessions. update post on group to protect aginst non-auth users