@login_required added

I have put @login_required decorator above `post_remove` and `post_draft_list`. Because even their links are not visible anonymous users can access to drafts list and also can delete your posts via url