add authentication in post controller except for index and show action