Fix: Don't allow app or relationship posts to be created when request authenticated with credentials unauthorized to do so