added forbidden method
added posts controller spec and more factories