auth for postobject complete, need to implement the user database