made ensure_logged_in apply to all post actions