added http security to create posts and delete comments