disallow access to new-post-form for non-logged in users.
use a loading template to catch the logging-in transition