can only post if logged in