Ensure only staff members can create blog posts; test for same.