I think I can safely setup all the routes as unauthenticated except for the post pages (where you can comment) and create post pages pretty quickly.