remove title from ajax reply because title is only used when post if first post of topic
simplify
remove some todo's and add in perm checks using api. the API needs work. refs #155
add docblock
correct perm checks. refs #155