phase 5, secret posts via ajax requests on user show page