[FEATURE] Protect PostController->createAction()