added post resource, fix auth controller