access deny when not logged in
only logged in user can see the new post btn
sorting list of posets