add a nonce input field
use the correct post type
if current user cant add a post die