added authentication to post & comments c ontrollers