authentication to create post
authentication to destroy post
change to postgresql