fixed the create post/comment actions (setting a proper user, getting rid of the temporary hack); added autologin on registering