posts new/create actions require authentication
use DatabaseCleaner
clean up spec
post edit/update action require authentication
post destroy action requires authentication