restricted access to post a resource to signed-up users