added additionally check for Post.create
changed Token.create (to update)