make post of layout secure, make layou json on aws bucket=owner-read