Don't require authentication for post :show action
Use sorting SQL that even works in Postgres
Add preview functionality