started on security for creating collections when making posts