removed insecure, allow logged in users to write to posts