finished 7-2. removed insecure package, and allowed certain writes to posts