fixed a security issue with deleting post & brush up comments