Only Authorized Users can Post

post_message now verifies that the current session owns the profile
attempting to add a message to a thread.