post creat
remove inscure and add user
now only login can post
now only login can visit post-create page
use method to insert
modify router